For a retail bank, a #pentest does two jobs: surface what an attacker could exploit, and prove to PCI DSS and FFIEC auditors that you looked. See how a full engagement covers both, from recon to final report. https://www.coresecurity.com/resources/case-studies/finance-penetration-testing-use-case

Get a detailed analysis of CVE-2026-35273, a serious vulnerability affecting Oracle PeopleSoft PeopleTools. Learn about how attackers can use this server-side forgery weakness and how the Fortra FIRE team created an exploit for Core Impact. https://ow.ly/1qnj50ZiIr3

What does a federal pen test look like? Get the full breakdown on how agencies use them to meet NIST/FISMA requirements, earn citizen trust, and harden defenses before an attacker finds the gaps: https://www.coresecurity.com/resources/case-studies/government-penetration-testing-use-case

Impacket 0.13.1 is live! This release includes new relay surfaces, stronger support for modern Windows and SQL Server environments, and a set of practical improvements across the examples scripts. Check out the blog post to get more details: https://www.coresecurity.com/blog/whats-new-impacket-0131

Government security teams need an efficient, repeatable way to prove which security flaws, like misconfigurations and application vulnerabilities, pose real risk to operations and sensitive data. See how Core Impact can help. #PenTesting 👉https://www.coresecurity.com/industries/government

The Core Impact exploit library is always expanding, as our our expert researchers continue to expand exploit coverage across operating systems, enterprise applications, and network services. Check out our quarterly recap to find out the latest additions: https://ow.ly/RqKu50YQo7x

Looking to upgrade your offensive security? Check into one of our Adversary Emulation Suites! Choose from our Red Teaming or Offensive Security Suites and discover the comfort of advanced tools and training. Learn more: https://ow.ly/Nke050YO5AK #redteaming #offsec #securitysuites

Headed to Black Hat Asia? We'll see you there! Stop by booth #515 to discuss all things #offsec and then head over to the business hall to check out a speaking session from expert Kyle Avery#515

We're wide awake for Insomni'hack ! Meet us in the conference hall to talk through offsec techniques, tooling decisions, and the patterns we’re all seeing in today's engagements. #silversponsor #insomnihack

Insomni'hack is almost here, and we’re so excited we can hardly sleep! Swing by our booth to talk shop about the latest offsec tools, techniques, and trends. We can’t wait to connect with you! #silversponsor #insomnihack #INSO26

In his latest blog, Core Security's own Ricardo Narvaja provides a PoC related to CVE-2026-2636, a blue screen of death (BSoD) on Windows CLFS driver https://www.coresecurity.com/blog/cve-2026-2636-blf-log-file-unrecoverable-state-bsod

In 2025 alone, our expert #exploit writers have added 44 new exploits to the Core Impact library, ensuring users can safely run effective pen tests. Get details on recently released exploits: https://www.coresecurity.com/blog/core-impact-chronicle-exploits-and-updates-h2-2025#exploit

Moseying through the stargate and heading to Denver for Wild West Hackin’ Fest #MileHigh2026! Swing by booth #12, where our red team pros will be on deck, ready to talk trends, swap stories, and share their offensive security expertise See you on the cyber‑frontier, Wild West Hackin' Fest#MileHigh2026#12

Seasons Greetings and Happy Holidays from Core Security! Here’s to a new year of impactful exploits and resilient defenses!

Landed in London for Black Hat Europe? We're ready and waiting to talk all things #offsec in the Business Hall at Booth 117! See you there! #BHEU

Core Impact 21.8 is live! This release is all about efficiency with smarter agent deployment (watch the demo below!), better reporting, smoother integration, and more. Check out the details in the blog: https://www.coresecurity.com/blog/core-impact-v218-release-blog

Landed in London for Black Hat Europe? We're ready and waiting to talk all things #offsec at Booth 117! #BHEU

Attackers thrive on weak spots—but you can close the gaps. From forgotten devices to risky access policies, every entry point matters. Our latest blog reveals 7 attack vectors that are easy to miss and how to secure them before they become a problem. https://ow.ly/gfbR50XgqhU

New release! Version 0.13 of #Impacket includes new attack paths and relay tricks, channel binding updates, MSSQL workflow upgrades, SMB Improvements, and more. Learn all the details of the new release in the update blog: https://www.coresecurity.com/blog/whats-new-impackets-013-release

The most dangerous assets are the ones you don’t know you have. ⚠️ Pen tests bring forgotten infrastructure to the surface so you can address it – before attackers do. ➡️ Learn how to find how much technical debt your company carries in our latest blog: https://ow.ly/v3um50XbZ6r